Privacy policy
This policy explains how LFS Digital Solutions handles personal information in ConfirmaYa, an appointment-reminder service over WhatsApp offered to businesses (for example, clinics).
Important — healthcare clients in the United States: appointment reminders that identify a patient may be protected health information under HIPAA. LFS Digital Solutions does not offer ConfirmaYa to U.S. healthcare providers until a HIPAA review and any required Business Associate Agreements are in place. [REVIEW with a U.S. attorney.]
1. Roles
For patient or customer data, the business that serves you decides how it is used; LFS Digital Solutions processes it only to send reminders on that business's instructions. For panel users, LFS Digital Solutions is responsible. Contact: lsanchezsegovia@gmail.com.
2. What we collect
- Patients/customers: name, WhatsApp number, appointment date and time, optional specialty, Yes/No/STOP replies and delivery status.
- Panel users: an irreversible coded value derived from the IP address (the IP itself is not stored) on failed sign-ins and on the record of documents accepted or acknowledged; one session cookie.
3. How we use it
Only to send reminders, record replies, show results to the business, honor opt-outs and secure the panel. We do not sell or share personal information, and we do not use it for advertising.
4. Retention
Appointment data is deleted automatically 90 days after the appointment date. Opt-out list: kept while the business uses the service. Sign-in attempts: 24 hours.
5. Service providers
Meta Platforms (WhatsApp Business), Cloudflare, Inc. (hosting and database, encrypted at rest and in transit) and jsDelivr (delivers the spreadsheet reader to panel users' browsers).
6. Your choices
Reply STOP (or BAJA) at any time to stop receiving messages; reply START (or ALTA) to resume. To access, correct or delete your information, email lsanchezsegovia@gmail.com. Residents of states with privacy laws may have additional rights; we respond within the period the applicable state law requires. LFS Digital Solutions is based in Kentucky; the Kentucky Consumer Data Protection Act (KRS 367.3611 et seq., effective January 1, 2026) applies only above volume thresholds this business does not currently meet. [REVIEW thresholds and other state laws for each U.S. customer.]
7. Children
The service is not directed to children under 13, and we do not knowingly collect their information directly (COPPA).
8. Messaging consent
Businesses must have each person's consent before sending reminders. [REVIEW with a U.S. attorney whether TCPA rules apply to WhatsApp reminders.]
9. Security
Encryption, protected credentials, Meta signature verification, sign-in lockout and activity logs.
10. Changes
Each version has a code and date. Material changes require the business to accept the new version in the panel.